Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File:                     TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier:          WVdPFv1tc4mU+kjwlUOhQYlIs1OsEhOGkO5wqkYJyJM=
Subject key identifier:   CC:0A:F5:84:34:01:B4:23:5C:B1:1C:28:EE:DE:B4:CB:91:5D:B1:FA
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer:       /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial:       0198816736A55099E7CE18A557C9494CACC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 22:01:21 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:21 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:21 +0000
Files and hashes:         1: Ej6AGqgrDcCEmdxGQ51_3en2bK0.roa (hash: iJ7FETE7qwjnaLdIl0yVteeRiSysQ9U3gczbrqrkwXU=)
                          2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: Ycia+/kv2n9JpkpJx1pFC6Xlp5XkgFDdWsWnHwIO4Iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:36:a5:50:99:e7:ce:18:a5:57:c9:49:4c:ac:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
        Validity
            Not Before: Aug  6 22:01:21 2025 GMT
            Not After : Aug  7 22:01:21 2025 GMT
        Subject: CN=cc0af5843401b4235cb11c28eedeb4cb915db1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:29:61:f6:25:af:3a:5a:d2:83:db:1c:1b:
                    b2:ef:8b:e1:20:57:5b:5b:4a:4d:12:3e:7e:7e:e0:
                    17:6d:56:98:c4:00:1a:82:1e:b0:dc:42:36:5f:95:
                    b4:e2:d7:6a:cd:b2:83:2e:aa:d9:63:d3:7a:7a:e9:
                    96:d6:c1:06:2e:de:03:f2:3c:d7:e9:13:bc:ac:91:
                    96:07:d7:ad:7b:06:4d:43:76:fd:c1:1c:84:34:7d:
                    71:16:0a:8d:14:38:6d:a4:9f:c9:2e:72:7a:67:50:
                    6a:f2:13:b2:41:cf:d9:24:bd:24:c9:7e:36:cb:3c:
                    ad:8b:e7:fe:9c:eb:e7:8b:63:78:42:2a:e8:0a:fa:
                    70:ac:0d:1b:e9:a2:17:8a:fd:2a:f7:7f:d8:24:e6:
                    98:8c:eb:b2:6f:ae:c6:91:30:5b:9f:90:c2:62:af:
                    13:fb:66:8b:55:c8:67:b7:01:5e:cb:8a:ff:0f:ef:
                    12:c6:32:6d:c1:0d:e2:15:2c:ab:db:1b:49:24:31:
                    ac:fe:0c:65:7b:1e:80:b1:72:73:21:fa:f9:24:8a:
                    a8:f8:9b:af:4f:7e:0f:8b:74:b7:64:85:64:95:f9:
                    b6:21:81:ed:15:67:01:22:e9:c6:63:f3:d8:ad:2b:
                    fc:ed:ee:d3:d1:8c:9f:22:81:23:c9:cc:0a:fe:86:
                    1c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0A:F5:84:34:01:B4:23:5C:B1:1C:28:EE:DE:B4:CB:91:5D:B1:FA
            X509v3 Authority Key Identifier:
                keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:50:cf:56:84:1e:af:21:5f:12:d7:6c:78:2f:fb:2f:fc:f7:
         51:5e:ac:6a:ea:35:aa:e1:4d:af:76:f5:52:e9:c7:0d:58:1d:
         76:31:6f:f3:a8:8c:fc:60:66:d0:c1:4b:12:73:43:e3:94:f2:
         6a:63:0a:19:70:6b:88:cd:98:a6:cb:d7:46:1c:b7:fd:3a:0b:
         5f:4a:fa:9a:37:b3:36:63:b5:db:f7:5c:55:2f:a9:c6:f5:6a:
         2f:39:5e:97:a7:00:af:5b:76:fc:02:81:a1:18:dd:e3:7d:a2:
         4a:ef:c4:e7:32:15:e4:36:be:b0:84:de:4a:68:1f:7b:75:64:
         e6:b7:11:76:56:0e:74:96:c5:44:9b:15:5b:24:c9:fb:eb:1e:
         1e:0a:3c:3e:7c:2e:ba:d1:d0:d1:eb:5a:9c:ba:6d:e8:80:98:
         38:6a:80:ff:d2:da:eb:1f:0b:92:d3:54:9a:45:96:ce:d9:9f:
         53:5d:9e:7a:9d:b6:7b:91:0f:cc:5a:55:07:83:a5:b7:ca:bb:
         2c:87:1e:98:9a:32:8e:cc:ee:6b:81:af:b4:6e:ec:36:ca:b6:
         9e:29:9d:56:ff:e7:42:3f:ec:4d:67:1b:41:4f:38:75:ce:8f:
         69:42:4b:15:b3:7f:0d:f1:1e:49:4b:c2:c0:b6:7d:1f:53:a5:
         31:18:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:54 2025 by rpki-client